This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer (raw, json) Hash identifier: X1kB5KFnkQ8sqbX+R/RsmZroOkTVMJAmh9p2RU56fcY= Subject key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B92FB4B679268D8662DCDA34EC9F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202421 IP: 185.204.176.0/22 IP: 2a0a:fac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:fb:4b:67:92:68:d8:66:2d:cd:a3:4e:c9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb95e6594dc37053ce98bd5889063591b35e2d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:5e:49:d3:cb:4d:d8:9b:17:6e:93:67:1c: f5:f2:05:d5:40:02:56:fb:72:92:68:d8:a7:e6:fd: 3c:83:15:e7:4d:6c:a7:5d:5b:2b:54:f5:21:01:de: c9:aa:e8:42:c3:3a:2e:70:14:28:ec:5a:76:34:ba: 89:2b:2d:e6:c6:10:ea:ca:32:ba:b9:6d:1d:2a:ef: c5:38:e4:d6:8c:50:54:55:9c:84:47:81:08:ba:5d: a9:e0:13:55:22:ff:dc:35:e4:6d:47:1e:9d:2a:62: 46:27:4e:55:d3:ed:1f:3b:6e:9a:d2:d3:63:c2:96: 05:94:5b:82:5a:a3:89:d9:9c:f1:54:5b:e8:04:b1: ab:db:cf:a5:34:33:6d:71:09:c0:e0:e1:8c:04:00: 0d:f1:76:bf:cb:6a:55:1d:00:82:14:09:75:a7:92: 67:14:7f:7a:01:5a:9f:16:68:e1:a8:ab:9c:a0:bf: 49:9d:74:ab:ac:dd:3d:c5:b8:b1:1f:4d:36:af:2c: ca:ed:e1:22:2c:cc:62:e9:9c:fa:38:8c:a6:24:2a: 2b:e6:fe:14:36:92:be:8d:4c:a7:65:88:4c:71:2e: 15:b5:6e:76:45:d2:60:69:2e:b0:35:f2:6e:93:08: ce:1a:28:98:4e:ec:1b:5e:7f:33:e7:24:58:5d:77: 39:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.176.0/22 IPv6: 2a0a:fac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202421 Signature Algorithm: sha256WithRSAEncryption 07:50:d9:54:fe:ec:73:96:5b:6a:c8:5e:58:50:79:c8:1d:0d: 49:e4:13:96:81:92:92:d9:72:65:77:b1:56:be:4d:66:0b:d8: 0d:81:4b:60:ee:c1:49:54:65:10:0b:72:de:47:95:22:82:e3: af:50:0e:7b:5b:0b:74:83:c1:04:f0:f8:03:b3:ff:70:96:34: 4e:c1:9d:20:b9:8b:46:d1:63:27:e5:ea:8d:48:01:39:d6:7c: 62:62:93:0d:aa:f4:3a:81:60:d5:58:95:65:a4:fa:e7:08:a6: ff:6f:96:92:b9:3d:67:4f:55:c1:2a:22:9e:fe:4f:89:78:7b: 22:6c:02:93:c1:71:6c:93:f4:51:9d:9b:9a:a0:f5:5c:8c:69: 71:2a:f3:00:3d:20:a4:23:40:48:13:8a:c4:90:f9:cd:79:ff: 30:58:58:97:89:68:75:8c:f2:47:29:10:5e:d0:a6:08:d7:5e: 4e:36:53:07:ed:48:f6:50:89:0f:db:c4:31:59:f8:ca:c1:f9: f2:46:10:ec:91:7c:16:30:0b:32:29:61:05:bb:95:55:2f:c3: 33:67:03:d2:b1:30:21:d0:3e:40:32:cb:e3:35:8d:d4:73:89: 2a:5e:50:2b:94:9e:6e:fc:cc:fd:4a:78:1a:f4:a0:0e:5d:50: 6e:d1:e4:09 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6W5L7S2eSaNhmLc2jTsn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk1ZTY1OTRkYzM3MDUzY2U5OGJkNTg4OTA2MzU5MWIzNWUyZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUteSdPLTdibF26TZxz18gXVQAJW +3KSaNin5v08gxXnTWynXVsrVPUhAd7JquhCwzoucBQo7Fp2NLqJKy3mxhDqyjK6 uW0dKu/FOOTWjFBUVZyER4EIul2p4BNVIv/cNeRtRx6dKmJGJ05V0+0fO26a0tNj wpYFlFuCWqOJ2ZzxVFvoBLGr28+lNDNtcQnA4OGMBAAN8Xa/y2pVHQCCFAl1p5Jn FH96AVqfFmjhqKucoL9JnXSrrN09xbixH002ryzK7eEiLMxi6Zz6OIymJCor5v4U NpK+jUynZYhMcS4VtW52RdJgaS6wNfJukwjOGiiYTuwbXn8z5yRYXXc5/wIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPuV5llNw3BTzpi9WIkGNZGzXi2AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzc4MTc4 Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2MzYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhm LTIxOTktNDhlMC05MDFkLWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZ aVFZMWtiTmVMWUEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEArnMsDANBAIAAjAHAwUDKgr6wDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDFrUwDQYJKoZIhvcNAQELBQADggEBAAdQ2VT+7HOW W2rIXlhQecgdDUnkE5aBkpLZcmV3sVa+TWYL2A2BS2DuwUlUZRALct5HlSKC469Q DntbC3SDwQTw+AOz/3CWNE7BnSC5i0bRYyfl6o1IATnWfGJikw2q9DqBYNVYlWWk +ucIpv9vlpK5PWdPVcEqIp7+T4l4eyJsApPBcWyT9FGdm5qg9VyMaXEq8wA9IKQj QEgTisSQ+c15/zBYWJeJaHWM8kcpEF7QpgjXXk42UwftSPZQiQ/bxDFZ+MrB+fJG EOyRfBYwCzIpYQW7lVUvwzNnA9KxMCHQPkAyy+M1jdRziSpeUCuUnm78zP1KeBr0 oA5dUG7R5Ak= -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:52 2026 by rpki-client